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(57) Abstract 

Methods for managing the distribution of client 
bits to client computers are disclosed. The methods of 
the present invention are particularly suited for use in a 
network environment in. which one or jnone clients, are 
networked with at least one server via communications 
network. The communications network can be a LAN, 
WAN, intranet, or the Internet. The client version of 
one or more selected applications software components 
(the "'managed components") is determined on the client 
computer. The client queries the server to determine the 
most current version of each of the managed components. 
If the client version is not the most current version, of 
if the client version is missing on the client computer, 
a determination is made whether to download the most 
current version onto the client. If the determination is made 
to install or upgrade one or more managed components, 
the most cunrent version of each of the selected managed 
components is downloaded onto the client computer. The 
installation or upgrade package is authenticated as it 
is being downloaded by validating a signature that is 
appended to the package. After the installation or upgrade 
package has been authenticated and downloaded onto the 
client computer, the package is installed onto the client. 
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METHODS FOR MANAGING THE DISTRIBUTION OF 
CLIENT BITS TO CLIENT COMPUTERS 



TECHNICAL FIELD 

The present invention relates generally to the field of client-server computing, 
5 and more particularly to a method and system for efficiently and securely distributing 
software, or client bits, to computers in a network. 
BACKGROUND OF THE INVENTION 

A client computer connected to a network, such as a local area network, wide area 
network, an intranet, or the Internet, can download digital information from server 
1 0 computers. Client application software typically accepts commands from a user and 

obtains data and ser\'ices by sending requests to server applications rumiing on the server 
computers. Currentiy; there are several ways to install application software (sometimes 
known as "client bits") onto client machines. For example, browsers running on client: 
machines typically have mechanisms for downloading in.slallation packages (such as : 
15 ActiveX controls or Java Applets) from the World Wide Web. Those approaches bring 
several limitations whh them. For example, browsers have proprietary installation 
packages that can be downloaded and installed on the user's machine. The browsers also 
have their own way of verifying code, and there is not one lightweight signing / 
verification mechanism that works for all browsers. Tlie user is confronted with security 
20 issues (e.g., warnings and permission dialogs) before tlie download of each software i 
item. In many cases, the user vnll not grant permission for the installation to take place 
because the user is unsure about the source {and, consequently, the authenticity and the 
. mtegrity) of the software. To update the client bhs, the user would have to know about^ 
available updates and go to a download site to get the update. That is, the update is not: 
25 made automatically as soon as new client bits are available. Creating an installation 
package that works with any browser brings with it a large overhead, resulting in an 
increase in download size and download time. Moreover, international users would have 
. to know about localized versions of the software to install it. 

In sum, with the proliferation of computers into homes and businesses throughout 
30 the world, and with the rapid pace of innovation of new and updated versions of 



application software, there has emerged a need for an efficient, secure meciianism to . ; 
provide new and updated application code, or cHent bits, to users. 
SUMMARY OF THE INVENTION 

The present invention provides a computer network-based method for managing 
the. distribution of application software to a chent computer. Generally, the method 
comprises installing on the client a software versioning engine that is associated with one 
or more applications packages. By prior agreement, when an;' of the associated 
applications is initiated, the application will first iaunch the \'ersioning engine. The 
versioning engine determines whether the current version of the associated application is 
installed on the client. If the version installed on the client is not current, the versioning 
engine determines {e.g., by asking the user) whether or not to update the code on the 
client. If an update is desired, the versioning engine updates the client bits by. for 
example, causing a server to download the current version of the application code to the 
client. 

In a presently preferred implementation, the versioning engine comprises a, first, 
lightweight component that is distributed to client computers as part of. or in conjunction 
with, one or more associated applications. The lightweight component functions as a 
bootstrap to detect the presence, or lack thereof, of a second component of the versioning 
engine - a core install and upgrade component. If the second component is not present on 
the client machine, or if it is not current, the current version of the second component is 
downloaded from a server to the client. The second component, the core install and 
upgrade component, determines whether the version of the associated application 
installed on the client machine is current and. if not, it requests updated code from the 
server. A third component of the versioning engine is a resource and language 
component that functions to verify that the user interface employed by the versioning 
engine is appropriate for the current language setting of the client before the usei* 
interface associated with the versioning engine is presented to the user. 

The present invention is suitable for use in connection with any type of computer 
network comprising at least one server and one or more clients. Thus, the invention may 
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be employed to manage the distribution of client bits o\ cr a local area network, wide area 
network, intranet, or the Internet. 

These and other features of the present invention are described in greater detail 

below. 

5 BRIEF DESCRIPTION OF THE DRAWINGS 

The foregoing summary and the following detailed description of presently 
preferred embodiments are better understood when read in coniunction with the 
appended drawings, in which: 

Figure 1 is a block diagram representing a general purpose computer system in 
10 which aspects of the present invention may be incorporated. 

Figure 2 is a schematic diagram representing a computer network in which 
aspects of the present invention may be incorporated. 

Figure 3 is a more detailed schematic diagram of a system for managing the 
distribution of client bits in accordance with the present invention. 
15 Figure 4 is a flowchart of a method for managing the distribution' of client bits in 

accordance with the present invention. 

DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

Overview 

As discussed above, the present invention was developed in tlie process of 
20 devising an improved system for delivering client bits to users" machines. The need for 
. : /f;UCh a system is apparent. Indeed, to be successful in today's increasingly competitive 
world of Web sites and Internet portal sites, for example, as well as tlie general field of 
providing new and improved software to users around the world, it is desirable to provide 
the most current and useful software to client machines. To attract loyal users of a Web 
25 site, for example, it is necessary to provide high-quality services, personalized content; 
fast response times, and an overall rich user experience. One strategy for achieving this is 
to move away from a server-only approach and to transfer fiuictionality to the client 
machine to assist in enhancing the user experience. In one approach, a portal site is 
rendered by the chent bits on the client machine and only the raw data (e.g., stock quotes, 
3 0 weather information, etc.) would have to be downloaded from the sender. This assumes 



that client bits and some of the static content of the page arc present on the user's 
machine. In another approach, cHent bits manage the user's prolile {e.'^.. preferences, 
settings, etc.). which saves roundtrips to ser\'ers tliat store user preferences. Again, to 
facilitate this, client bits would be installed on the user's machine. As illustrated in these 

; 5 two examples, the first step to the client bit strategy is to solve the problem of bringing 
client bits to tlie users' machines in a timely, reliable, efficient, and secure manner. 

A presently preferred implementation of the present invention provides an 
improved way to manage certain application software components (referred to as 
"managed components") on a network of client computers linked to a common server. 

10 Briefly, according to the invention, a % ersioning engine is installed on a client computer 
to ensure that the ciient version of the managed components is the most current version 
available. More particularly, the versioning engine is executed, or launched, eyery time 
the user connects to the network (/. a., goes online). Before the user interface for the 
network portal is presented to the user, tiie versioning engine looks to the server for a file 

%5 that includes a list of managed components. The file includes, for each managed 
component, a version indicator that represents the server version of the managed 
component (i.e. , the most current version of the managed component available). 

1 The versioning engine compares the client version of each managed component 
to the server version. If any of the managed components ai-e missing, or if the client 

2 0 version is out-of-date (/. e. , older than the server version), the versioning engine notifies 

the user and gives the user the option of having the server version of the managed 
component installed. If the user elects to have the managed component installed or 
updated, the versioning engine causes the server to download an installation or upgrade 
package for the managed component to the client. 

25 For security reasons, the installation or update package includes a signature 

created using a known key. The versioning engine identifies the signature to verify that 
the installation or upgrade package is authentic. If the package is authentic, the 
versioning engine proceeds to install or upgrade the managed component on th^ client. 
Otherwise, the installation or upgrade package is not downloaded. This insures that only 

30 authentic code is downloaded to the ciient. 
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The present invention addresses the shortcomings of the prior art in several ways. 
For example, the installation and versioning engine can download installation packages 
in a browser agnostic way. That is. it can use any browser's download engine. To verify 
the authenticity of the installation packages, a lightweight signing/verification 
5 mechanism is used. The engine has its own private/public 1 024-bit ke\- to create and 
verify an MD5 (Message Digest 5) signature. The engine oniy installs authenticated 
■. software. The user is presented with a simplified dialog and can be sure that the software 
tiiat is about to be installed is authentic. The engine automatically identifies components 
that are out-of-date or missing on the user^s machine and suggests that they be updated 
10 when the user is online. The engine includes the necessary tools to perform installations 
and uses components already installed on the system to perform parts of the task. If the 
managed components have versions localized for the language of the user, tiie engine: can 
recommend those. To install the versioning engine onto the user's machine, an initial 
version is deployed with other components being installed from the ser\'er. Once on the 
15 users' machines, the engine takes care of its own upigrades. 

The present invention will now be explained in greater detail with reference to a 
presently preferred embodiment thereof. I-irst. a description of exeiTiplary computer and 
network environments is provided, and then a detailed description of the inventive 
. method and system for managing the distribution of client bits is provided. 
20 . . Computer Environment 

' Figure 1 and the following discussion are intended to provide a brief general 

description of a suitable computing em-ironment in which tlie invention may be 
implemented. Although not required, the invention will be described in the general 
context of computer-executable instructions, such as program modules, being executed 

25 by a computer, such as a client workstation or a server. Generally, program modules 

include routines, programs, objects, components, data structures and the like that perform 
particular tasks or implement particular abstract data types. Moreover, those skilled in 
the art will appreciate that the invention may be practiced with otiier computer system 
configurations, including hand-held de^'ices. multi-processor systems. 

30 microprocessor-based or programmable consumer electronics, network PCs, 
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minicompuiers. mainframe computers and the like. The inx'entioni may also be practiced 
in distributed computing environments where tasks are performed by remote processing 
devices that are linked through a communications network, hi a distributed computing 
environment, program modules may be located in both local and remote memory storage 
devices. 

As shown in Figure 1 , an exemplar)' general purpose computing system includes 
a conventional personal computer 20 or the like, including a processing unit 21. a system 
memor>' 22. and a system bus 23 that couples ^'arious systetn components including the 
system memory to the processing unit 21 . The system bus 23 may be any of several types 
of bus structures including a memorv' bus or memory controller, a peripheral husb and a 
local bus using any of a variety of bus architectures. The system memory includes 
read-only memory (ROM) 24 and random access memoiy (RAM) 25. A basic 
input/output system 26 (BIOS), containing the basic routines that help to transfer 
information between elements within the personal computer 20, stich as during start-up, 
is stored in ROM 24. The personal computer 20 may further include a hard disk drive 27 
for reading from and writing to a hard disk (not shown), a magnetic disk drive 28 for 
reading from or writing to a removable magnetic disk 29, and an optical disk drive 30 for 
reading from or writing to a removable optical disk 3 1 such as a CD-ROM or other 
optical media. The hard disk drive 27. magnetic disk drive 28. and optical disk drive 30 
are connected to the system bus 23 by a hard disk drive interface 32. a magnetic disk 
drive interface 33, and an optical drive interface 34. respectively. The drives and their 
associated computer-readable media provide non-volatile storage of computer readable 
instructions, data structures, program modules and other data tor the personal computer 
20. Although the exemplary environment described herein employs a hard disk, a 
removable magnetic disk 29, and a removable optical disk 3 1 , it should be appreciated by 
those skilled in the art that other types of computer readable media which can store data 
that is accessible by a computer, such as magnetic cassettes, flash memory cards, digital 
video disks, Bernoulli cartridges, random access memories (RAMs). read-only memories 
(ROMs) and tlie like may also be used in the exemplary operating envirorunent. 
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A number of program modules ma\- be stored on the hard disk, magnetic disk 29. 
optical disk 3 1 . ROM 24 or RAM 25. including an operating system 35. one or more 
application programs 36. other program modules 37 and program data 38. A user may 
enter commands and information into the personal computer 20 through input devices 
5 such as a keyboard 40 and pointing device 42. Other input devices (not shown) may 
: include a microphone, joystick, game pad. satellite disk, scanner, or the like. These and 
other input devices are often connected to the processing unit 2 1 through a serial port 
interface 46 that is coupled to the system bus. but may be connected by other interfaces, 
■ such as a parallel port, game port, or universal serial bus (USB). A monitor 47 or other 
10 type of display device is also connected to the system bus 23 via an interface, such as a 
video adapter 48. In addition to the monitor 47. personal computers typically include 
other peripheral output devices (not shown), such as speakers and printers. 

The personal computer 20 ma}- operate in a networked environment using logical 
connections to one or more remote computers, such as a remote computer 49. The remote 
15 computer 49 may be another personal computer, a server, a router, a network PC, a peer 
device or other common network node, and typically includes many or all of the 
elements described above relative to the personal computer 20. although only a memory 
storage device 50 has been illustrated in Figure I . The logical connections depicted in 
Figure i include a local area network CLAN) 5 1 and a wide area network (WAN) 52. 
20 Such networking environments are commonplace in offices, enterprise- wide computer 
networks, intranets, and the Internet. 

When used in a LAN networking environment, the personal computer 20 is 
connected to the LAN 5 1 through a neuvork interface or adapter 53. When used in a 
WAN networking environment, the personal computer 20 typically includes a modem 54 
25 or other means for establishing communications over the wide area network 52, such as 
the Internet. The modem 54, which may be internal or external, is connected to the 
system bus 23 via the serial port interface 46. In a networked environment, program 
modules depicted relative to the personal computer 20. or portions tliereof. may be stored 
in the remote memory storage device. It will be appreciated that the network connections 
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shown are exemplary and other means of establishing a communications link between 
the computers may be used. 

Network Environment 

As noted, the computer described above can be deployed as part of a computer 
network. In general, the above description applies to both server computers and client 
computers deployed in a network environment. Figure 2 illustrates one such exemplary 
network environment in which the present in\'ention may be employed. 

As shown in Figure 2, a number of servers 1 Oa. 10b. etc.. are interconnected via a 
communications network 160 (which may be a LAN. WAN. intranet or the Internet) with 
a number of client computers 20a. 20b. 20c. etc. hi a network environment in which- the 
communications network 160 is the Internet, for example, the servers 10 can be Web 
servers with which the clients 20 communicate via any of a number of known protocols 
such as hypertext transfer protocol (HTTP). Each client computer 20 can be equipped 
wilii a browser (not shown) to gain access to the servers 1 0. As shown, server 1 Oa 
includes a component information file fCIF) 12 and server 10b includes one or rnpre 
managed components 30. The GIF 12 and managed components 30 will be described in 
greater detail below. In addition, the client machines include one or more managed 
components 30, a versioning engine 100 and a registry file 102. all of which may be 
stored on a hard disk or other non-volatile computer readable storage medium. 

Method and System for Distributing Client Bits 

Figure 3 is block diagram of a presently preferred implementation of a client bits 
installation and versioning engine according to the present invention. Versioning engine 
100 includes three components: a lightweight component 1 10. a core component 120, 
and a resource and language component 130. Altliough a versioning engine 1 00 
according to the present invention can be implemented any number of ways {e.g.^ the 
versioning engine can be one component), there are several benefits to dividing the 
fimctionality of the versioning engine LOO into three separate components. First, for 
reasons that will be described below in greater detail, only the lightweight component 
110 needs to be installed on the client initially. Tliis reduces tlie overhead associated with 
the initial installation. Second, the versioning engine 100 will have the ability to update 
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itself when more current versions of the \-ersioning engine 100 become available. Third, 
the versioning engine 100 can be localized each time it is executed and can manase 
internationalized components. Each of these components, and the interactions between 
them, will be described in detail below, 
5 . Initially, only tlie lightweight component 1 1 0 is installed on the client 20. The 

■ lightweight component 11 0 can be installed by itself, or in connection with the 
installation of other client bits. The lightweight component 1 1 0 can be installed from an 
external computer-readable medium such as a magnetic diskette or CD-ROM, etc., or it 
can be downloaded onto the client 20 from the server 1 0. For example, in the event that a 

10 particular software package is being installed on the client 20 by being dovmloaded from 
the server 1 0, the lightweight component 1 1 0 can be downloaded from the server 1 0 and 
installed on the client 20 at the same time. It is desirable, therefore, that the lightweight 
component 1 10 be a.s small as possible so as not to add unwanted overhead to the 
download from the server 10. Preferably, tlie lightweight component has an 

15 uncompressed size of less than about 20 kilobytes. In one embodiment, the lightweight 
component U 0 has an uncompressed size of between 1 8 kilobytes and 1 9 kilobytes. 

The user does not interact directly with the lightweiglit component 1 1 0. Instead, 
■when the user attempts to connect to the network (i.e., to establish a connection to the 
■ server 1 0), the host client executes the lightweight component 1 1 0. The lightweight 

20 coimponent 110 performs two main functions. First, it manages the core component 120 
by ensuring that the latest version of the core component 1 20 exists on the client 
computer 20. Then, the lightweight component 1 1 0 launches the core component and 
terminates itself. 

To ensure that the latest version of the core component 120 exists on the client 
25 computer 20, the lightweight component 1 1 0 checks the registry 1 02. The registry 102;is 
a file that resides on the client 20 that includes dynamic link libraries (DLLs) for 
components the user has registered. The lightweight component determines from the : 
registry 1 02 whether the core component has been installed on the client machine and, if 
so. the lightvveight component determines from the registry the version number of the 
30 client version of the core component 120. 
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To determine whether the client 20 has tlie most current ^-crsion of the core 
component 120. the lightweight component 110 consults the CIF 12 on server 10a. The 
CIF 12 identifies the most current version of the core component 1 20 available on the 
server (i.e., the server version of the core component 1 20). and the Universal Resource 

: 5 Locator (URL) of the installation package for the server version of the core component 
120. The lightweight component 1 1 0 then compares the server version of tlie core 

1 component 120 to the client version. 

The lightweight component 1 1 0 can compare the client version and the server 
version in a number of ways. For example, the lightweight component can assume that if 

10 the server version number differs from the client version number that the ser\^er version 
is the most current version. In another example, the GIF can include the date and time the 
server version was created. If the date and time of the server version postdates the date 
and time the client version was created, the lightweight component 1 1 0 will install tlie 
server version. 

15 If the lightweight component determines that the server version is more current, 

or that the core component 120 is missing from the client, the lightweight component 
provides an indication that the client ^'erHion differs from the most current version. 
Preferably, the lightweight component i i D indicates to the server that the client version 
differs from the most current version by requesting the installation package for the server 

20, version of the core component 120. More generally, however, the lightweight 

component could provide such an indication to another routine nirming on the client, or 
write to a library file that keeps track of which components are missing or out-of-date, 
etc. 

Preferably, the installation package resides on the same server 1 Oa that has the 
25 CIF 12, although it can reside on a second server 10b (not shown in Figure 3). The 
lightweight component 1 10 communicates with the server 10 using HTTP. 
Consequently, the lightweight component 1 10 can use any browser's download 
mechanism to download the installation package by using HTTP "GETS" to a URL. In 
this way, the versioning engine 100 is browser agnostic. The server 10 responds by 
30 downloading a compressed version of the core component 120 onto the client computer 
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20. The lightweight component 1 10 then proceeds to verify the authenticity of the new 
version of the core component and then to install it onto the client computer 20. 

In one exemplary embodimenl. an installation package is a cabinet file (i.e., a 
"'.cab" file). To ensure that only authentic llles are installed onto the client, the file is 
signed using a private 1024-bit key that results in a \ 36-byte signature that is appended 
to the file. A 1024-bit public key is encoded into the lightweight component 110 to verify 
the signature attached to the installation package. 

Once the fightweight component 1 1 O has verified the authenticity of the 
installation package, the lightweight component 1 1 0 expands the compressed version of 
the core component 120 and installs the expanded \'ersion of the core componeitt 120 ' 
onto the client 20 via an install script included in the cabinet file. The lightweight 
component 110 then updates the entn- for the core component 1 20 in the registry 102. 

After the lightweight component 1 1 0 ensures that the most current version of the 
core component 120 exists on the client 20. the lightweight component 110 launches the 
core component 120 and then terminates itself In tliis way. the lightweight component 
1 10 behaves like a bootstrap component. 

, If the lightweight component 1 10 encounters any errors (e.g.. the lightweight '■■ 
^component is unable to connect to the ser\'er: the necessary registry entries are not found, 
etq.), the lightweight component 1 1 0 terminates itself without launching tlie core 
component 120. Because the user does not interact with tlie lightweight component 1 10. 
tiie user will be unaware tliat anytliing has happened and the client 20 will simply 
contmue to use the existing client versions of the managed components. 

In a preferred embodiment, the lightweight component 1 1 0 includes a run 
interval, preferably defaulted to 24 hours. That is. even though the user may connect to 
-the network more frequently than the run interval (e.g., more than once in a 24 hour 
period), the lightweight component 1 10 checks for updates only once every 24 hours. 
Because, as will be discussed in greater detail below, the user is notified if any of the 
managed components are missing or out-of-date, the use of a run interval prevents the : 
user from being. so notified more jfrequently than the user might care to be. Preferably, 
the.run interval can be changed based on an instruction in the CIF 12. 
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The core component 120 determines whether a more current version of any of the 
managed components 30a. 30b. 30c is a\ailabie Irom the sencr and. if necessary, installs 
or upgrades them on the client 20. The core component 1 20 downloads the CIF 12 from 
the server 10 onto the client 20. The CIF 12 includes a list of managed components 30 as 
well as certain information corresponding lo each. For example, in a preferred 
embodiment, the CIF 12 includes the server version number for each managed 
component 30. along with a location of the installation package for that component. The 
CIF 12 also preferably includes a description of each managed component, including its 
download size. etc. 

The CIF 12 can also include in\-entory information, i.e.. information that enables 
the core component 120 to determine whether a managed component 30 is out of date. 
For example, inventory information can include a version stamp for a .DLL or .EXE file, 
a time stamp, or the presence of a registry key. Although a managed component 30 can 
be made up of several files, it is preferred that only one file be used for inventory control. 
For example, consider a managed component 30 made up of the following files; 

abc.txt version 1.0.0.1 

defdll version 1.0.0.1 

ghi.exe version 1.0.0.1 

jki.dat version 1.0.0.1: 

and that the update for that managed component 30 includes the following files: 

abc.txt version 1.0.0.2 

defdll version 1 .0.0.3 

ghi.exe version i .0.0.2 

jki.dat version 1.0.0.1. 

In this example, any of the files abc.txt. def dli. or ghi.exe could be used for inventory. 
Notice that no update would be triggered ifjkl.dat were used for inventory because its 
version did not change. This file is. therefore, unsuitable for inventory. 

Preferably, the CIF 12 also includes an installation type indicator for each 
managed component 30. In a preferred embodiment, the installation types that can be 
associated with a managed component include, but are not limited to, the following four 
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types. First, a component cmi be an "optionar" componenl. indicating that the user carl 
choose not to install the component. Second, a component can be a ""mandatory"' 
component, indicating that the user cannot reject the component. For example, if the 
lightweight component is out-of-date or missing, the user is not consuhed before the ' 
5 installation of a new version. Third, a component can be a "dependent" component, 
indicating that it is a part of another component. Fourth, a component can be a '*no user 
interface" (NOUI) component, indicating that the component must be installed before 
any user interface is.presented to the user. For example, for reasons that will be described 
in greater detail below, updates to the resource and language component 130 arc made 

10 before a user interface is displayed. 

; The core component 120 manages the lightweight component 110 and the 
resource and language component 130 in a special way. If either the resource and 
language component 130 or the lightweight component 120 is missing or out-of-date, the 
missing or out-of-date component will be installed or updated. respecti\'ely, before a user 

15 mterface 104 is displayed. In this way. the versioning engine is self-updating. That is, the 
lightweight component 110 ensures that the core component 120 is always current (as 
described above), and tiie core component 1 20 ensures that the lightweight component 
110 and resource and language component 1 30 are always current. This is important 
because a file cannot update itself while it is running. The user would have to request a 

20 ■ download of the server version of the versioning engine 1 00, disconnect from the 

network, and then re-connect to the network to execute the newly installed version of the 
versioning engine. Because the lightweight component 11 0 and the core component 120 
do not run concurrently, however, this embodiment of the present invention provides the 
ability for the versioning engine 100 to update itself without adverseh" affecting the user 

25 exp^ience. 

Once the client versions of the lightweight component 1 1 0 and resource and 
language component 130 have been verified, if no other managed components 30 are 
missing or out-of-date, the core component 120 simply terminates and the user 
: experience is unaffected. 
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If the core component 120 determines that an\- NOIJI components are missing or 
out of date, the core component 120 causes the ser\'er 1 0 to download the installation of 
upgrade paclcages associated with these components. The most current version of the 
NOUI components are mstalled automatically onto the client 20 witliout any intervention 
5 from tlie user. 

If, however, the core component ] 20 detemiines that any mandatory components 
are missing or out-of-date, the core component 120 displays a user interface 104. The Ul 
104 includes a text window 140 in which a list of missing or out-of-daie components is 
displayed to the user. The text window displays a list of mandatoiy and optional 

10 components that the core component 120 found to be missing or out of date. In a 

preferred embodiment, if the core component 120 finds that no mandatory components 
are missing or out of date, no UI is presented, even if the core component 120 finds that 
one or more optional components are missing or out of date. 

The user interface 1 04 gives the user an option whether or not to install or update 

15 the niissing or out-of-date components. If the user does not wish to update, the icle;ntified 
managed components, the user selects the "Postpone" button 1 42 and the core 
component 120 terminates itself. On the other hand, if the user chooses to install (e.g., by 
selecting the "Update" button 144), the core component 120 causes the most current 
versions of the managed components to be installed in the same manner as described 

20 above in connection with the lightweight component 1 1 0. In general, the installation 

packages for the managed components 30 can reside on the same ser\'er iOa that has tlie 
CIF 12, or on a second server 10b. Tlie installation of any of the managed components is 
subject to the same authentication procedure as described above in connection with the 
lightweight component 

25 If the user elects to postpone installation of a mandator^' component, the next 

time the user executes the mandator}- component, the user will be notified that a more 
current version of that component exists. Note, however, that no matter , how many times 
the user executes the out-of-date mandatory component, the user will be notified only 
once every run interval (e.g., only once every 24 hours) that the mandatory component is 
30 out of date. 
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In a preferred embodiment, the user interface 1 04 also includes a "details" button 
146 that the user can select to retrieve more infoi mation on the managed component that 
- the core component has detected as being missing or out-of-date. Also, the UI 104 
preferably includes a "Disable" button 148 that the user can select if the user wishes to 
permanently disable the versioning engine 1 00 from running on the client 20. The user, 
by selecting this option, assumes personal responsibility for managing the application^ 
software on the client computer without an}- future assistance from the versioning engine 
100. 

The core component 120 can also perfonn tasks such as checking for available 
disk space before installation, or permitting the user to change the run interval described 
above. The core component 120 can also report back to the server 10 a list of the 
managed components 30 a user is scheduled to have installed, as well as the result of the 
download of each of those components. The core component 120 in a presently preferred 
implementation is estimated to be about 40 kilobytes uncompressed. 

The resource and language component 130 provides the core component 120 vvith 
the user interface 104 and any other iocalizable information. Having the core component 
120 manage the resource and language component 1 30 as a special case solves the core 
component's localization problem. That is. because the core component 120 ensures that 
the most current version of the resource and language component 130 is installed before 
the user interface 104 is presented to the user, the core component 120 ensures tlaat, for 
example, the user interface vnll be in the language the user has set for the client computer 
20. In addition, as support for more languages becomes available, the core component 
120 will be able use the appropriate language component without having to be upgraded 
itself. Another advantage is that the user interface 104 can also be completely changed by 
simply providing the necessary resource and language component 130 and specifying it 
in the CIF 12, again without having to upgrade the core component 130 itself. 

To solve the problem of globalization and localization, all component specific 
iriformation can be made dependent on the language setting specified on the client 20. If 
the client 20 has the language set to German, for example, a German description for a ; 
particular managed component can be displayed. The location for the installation 
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package could be different for German, and if the client were switched to German, the 
German version of a component would be instal led. The consideration for globalization 
allows the correct resource and language component 1 30 to be installed depending on the 
language settings of the client so that the correct user interface 104 and any localizable 
5 information can be provided to the core component 1 20 before the user interface 104 is 
displayed. In terms of size, each resource and language component is about 4 kilobytes, 
but its size can grow depending on the resources included in it. 

More than one resource and language component 1 30 can reside on the client 20 
at the same time. For example, consider a client wherein the language setting is set to 

10 German. The first time the installation engine 1 00 is run on that client, a German 

resource and language will be downloaded and will remain on the system (unless the 
engine 100 is uninstalled). Suppose that the user switches the language on that client to 
French. The next time the installation engine 1 00 is run. a French resource and language 
component will be downloaded, and the user interface will appear in French. At this 

IS point, the client will have two resource and language components on the machine. If the 
user switches back to German, and the German resource and language componerit has not 
changed, nothing will be downloaded since the correct version of the Cirernian rest)urce is 
on the system already. If the German resource and language component has changed 
since it was last utilized, the core component 120 will recognize that it changed and 

20 cause the component to be updated before the user interface is presented. 

In sum, the present invention provides methods for managing applications 
software on client computers. The methods of the present invention are partictxlarly 
suited for use in a network environment in which one or more clients are networked with 
at least one server via a communications network. The communications network can be 

25 a LAN, WAN, intranet, or the Internet. 

Figure 4 is a flowchart of a method for managing the distribution of client bits in 
accordance with the present invention. At step 410. the client version of one or more 
selected applications software components (the '"managed components") is determined 
on the client computer. Preferably, the client computer has a registry that includes an 

30 indication of the client version of each of tlie managed components. 
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At step 412, the client queries the sen er to determine the most current version of 
each of the managed components. Preferably, a component information file (GIF) 
resides on the server. The GIF includes a list of managed software components, and, for 
each managed component, the GIF includes an indicator that represents the most current 
5 version of the managed component, and a location indicator that represents a location at 
which an installation or upgrade package for the managed component can be found. 

At step 414, if the client version differs from the most current ^■ersion. (i.e.. either 
the managed component is missing on the client computer, or exists on the client but is 
out-of-date), an indication is provided indicating tliat the client version differs from the 

10 most current version. Preferably, a user interface is displayed which provides the user 
with the option to install or upgrade (i.e.. download) the missing or out-of-date managed 
components, or to postpone installation. 

If, at step 4 ! 6, the determination is made to install or upgrade one or more 
. managed components, at step 41 8 the most current version of each of the selected 

15 managed components is downloaded onto the client computer. Preferably, an installation 
or upgrade package located on the ser\'er is downloaded onto the client in compressed 
format. The installation or upgrade package is autiienticated as it is being downloaded 
by validating a signature that is appended to the package. 

At step 420, after the installation or upgrade package has been authenticated and 

20 downloaded onto the client computer, the package is uncompressed and installed onto the 
client. In this way, the most current version of selected applications software 
components available at the server can be managed across a plurality of clients. Thus, 
the present invention provides an efficient, secure mechanism to provide new and 
updated application code, or client bits, to users. 

25 An important feature of the preferred embodiments of the invention is the use of a 

versioning engine that resides on the client computer to determine the client version of 
each of a plurality of managed components. If any of the managed components are 
missing from the client or out-of-date, the versioning engine causes the server to install 
or update the missing or out-of-date components on the client. It is understood, however, 

30 that the invention is susceptible to various modifications and alternative embodiments; It 
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should be understood that there is no inteiiuon lo limit the invention to the specific 
embodiments described lierein. On the contrary, the invention is intended to cover all 
modifications, alternative constructions, and equi\'alents falling within the scope^and 
spirit of the claimed invention, - 
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CLAIMS 

We claim: 

1 . A client computer-based method for managing software on a client computer, 
comprising: 

determining a client version of a selected software component on tlie client; 
determining a most current version of the selected software as indicated by a first 
server connected to the client via a communications network; 

determining whether the client version is different from the most current version; 

and 

if the client version is different from the most current version, providing an 
indication that the client version differs from the most current version. 

2. The method of claim 1, further comprising downloading the most current 
version of the softvvare from the first server to the client. 

3. The method of claim 1, further comprising: 

downloading the most current \-ersion of the software onto the client from a 
second server connected to the client \'ia the communications network. 

4. The method of claim 1, further comprising: 

presenting to a user at the client a user interface tliat provides the user with an ' 
option to download the most current version of the application software onto the client; 
and 

if the user selects the option to download, downloading the most current version 
of the application software from a ser\-er onto the client. 

5. The method of claim 1 , wherein tlie most current version is determined from a 
component information file (GIF) residing on the server, wherein the GIF includes a list 
of managed software components, and. for each managed component, the GIF includes 
an indicator that represents the most current version of the manned component, and a 
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location indicator that represents a locaiion at which an installation or upgrade package 
for the managed cornponent can be found. 

6. The method of claim 2. fiirther comprising: 

authenticating tlie most current \ ersion of tite software before downloading the 
i 5 most current ^'ersion onto the client. 

7. The method of claim 6, wherein the installation or upgrade package includes a 
signature, and the method further comprises: 

determining whether the signature is a valid signature: and 
if tlie signature is a valid signature, downloading the installation or upgrade 
;io package onto the client. 

8. The method of claim i, wherein the communications network is tlie Internet. 

9. The method of claim 1 . wherein the communications network is an intranet. 

10. The method of claim 1, wherein the communications network is a local area 
network (LAN). 

15 11. The method of claim 1, wherein the communications network is a wide area 

network (WAN). 

12. A computer-readable medium having computer-executable instructions for 
instructing a client computer to perform the steps recited in claim 1 . 

13. The computer-readable medium of claim 12 having further computer- 
20 executable instructions for performing the step of: 

downloading the most current \-ersion of tlie software from the server to the 

client. 
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14. The computer-readable medium of claim 1 2 having further computer- 
executable instructions for performing the steps of: 

presenting to a user at the client a user interface that provides the user with an 
option to download the most current \-ersion of the application softw^ai-e onto tlie client; 



if the user selects the option to download, downloading tlie most current version 
of the application software from a server onto the client. 

15. The computer-readable medium of claim 12. wherein the most current version 
is determined from a component information file (CIF) residing on the server, wherein 

10 the CIF includes a list of managed software components, and. for each managed 

component, the CIF includes an indicator that represents the most current version of the 
managed component, and a location indicator that represents a location at which an 
installation or upgrade package for the managed component can be found, 

16. The computer-readable medium of claim 13 having further computer- 
15 executable instructions for performing the step of: 

authenticating the most cirrrent \ ersion of the software before downloading the 
most current version onto the client. 



5 



and 



17. The computer-readable medium of claim 1 6 having further computer- 
executable instructions for performing the steps of: 



20 



determining whether a signature included in the installation or upgrade package is 
a valid signa:ture; and 



if the signature is a valid signature, downloading the installation or upgrade 
package onto the client. 



1 8. A computer readable medium having computer executable components 



25 



comprising: 
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a bootstrap component and a core component, wherein: 

the bootstrap component determines whether the core component is present on a 
client computer and. if the core component is not present on the client computer, causes 
that the core component to be downloaded onto the client computer from a server 
5 coupled to the client computer via a communications network. 

19. The computer readable medium recited in claim 1 8. wherein the bootstrap 
component launches the core component. 

: 20. The computer readable medium recited in claim 1 8. wherein the bootstrap 

component determines a client version of the core component on the client, determines a 

10 most current version of the core component as indicated by the server, compares the 
client version with the most current version and, if tlie client version differs from the 
most current version, determines' whether to download the most current version of the 
core component onto the client. 

21 . The computer readable medium recited in claim 20. wherein the bootstrap 
15 component requests that the server download the most current version of the core 

component onto the client. 

22. The computer readable medium recited in claim 1 8. wherein the core 
component determines a client version of at least one managed component on the client, 
deteimines a most current version of the managed component as indicated by the server, 

20 compares the client version of the managed component to the most current version of the 
managed component and, if the client version of the managed component differs from the 
most current version of the managed component, determines whether to download the 
most current version of the managed component. 
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23. The computer readable medium recited in claim 22. wherein the core 
component requests that the server download the most current version of the managed 
component onto the client. 

24. The computer readable medium recited in claim 1 8. wherein the bootstrap : 
5 component has an uncompressed size of less than about 20 kilobytes. 

25. A computer readable medium having computer executable components 
comprising: 

a core component that determines a client version of at least one managed 
component on a client computer connected to a server via a communications network, 
10 determines a most current version of the managed component as indicated by the server, 
compares the client version of tlie managed component to the most current version of the 
managed component and, if the client version of the managed component differs from -the 
most current version of the managed component, determines whetlier to download the 
most current version of the managed component. 



15 26. The computer readable medium recited in claim 25. wherein the core 

component requests that the server download the most current version of the managed 
component onto the client. 

27. The computer readable medium recited in claim 25, wherein the core 
component requests that a second server download the most current version of the 
2 0 managed component onto the client. 



28. A network server, comprising: 

a computer readable storage medium containing a component information file 
(GIF), wherein the GIF includes a list of managed software components, and, for each 
managed component, an indicator of a most current version of the managed componeiit 
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and an indicator of a location at which an installation or upgrade package for the 
managed component resides; 

whereby a client computer connected to the server via a communications network 
is enabled to access the CIF to determine whether a client version of a managed 
1 5 component residing on the client is different from the most current version and to 
download the most cuirent version. 

29. Tl-ie network server recited in claim 28. wherein the computer readable 
storage medium includes at least one managed component for delivery to the client. 

30. The network server recited in claim 28. wherein the network server is a Web 
10 server connected to the client computer via the internet. 

31. The network server recited in claim 28, whei-ein the network server is 
connected to the client computer via an intranet. 

32. The network server recited in claim 28, wherein the network server is 
cormected to the client computer via a local area network (LAN). 

15 33. The network server recited in claim 28. wherein the network server is 

connected to the client computer via a wide area network (WAN). 

34. The network server recited in claim 28, fiirther comprising; 
a server computer operatively coupled to the computer readable storage medium, 
wherein the client computer accesses the CIF information via the server 
20 computer. 
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